Privacy Policy


Last Updated: October 23rd, 2019

This Privacy Policy discloses how we gather, use and protect your personal data.

This Privacy Policy applies to personal data collected by Made to Web ("us", "we", or "our") through madetoweb.co.uk (our "website") or, as described below, by other means during the course of its business.

1. Controller

Responsible data controller in the meaning of Art. 4 No. 7 GDPR is:

You can contact the data protection officer via email at: privacy@madetoweb.co.uk

2. General Information

During the course of carrying out our business and performing our services, we collect personal data to conduct our business, provide and market our services, and meet our legal obligations. Likewise, we may also collect personal data for other purposes, which we would describe in more detail to you at the point we collect the personal data.

You may refuse to provide us with some or all of your personal data; however, this may limit the ways in which we can interact with you, including providing you with our services.

3. Logfiles

We collect personal data through our internet access logs. When you access our website, your internet address is automatically collected and is placed in our internet access logs (i.e., log files on server). We also record the URLs of the websites and pages you visit, the times and dates of such visits, information about the computer hardware and software you use.

This information may include Internet protocol (IP) addresses, browser type and version, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, number of visits, websites from which you accessed our site (Referrer), and websites that are accessed by your system via our site.

The processing of this data is necessary for the provision and the security of our website. The legal basis for this processing is Art. 6(1)(f) GDPR. We do not link these data to certain individuals. After the processing for the mentioned purposes, the data will be deleted.

4. Contact

On our website we use several contact forms which can be used to get in contact with us electronically. To handle your request it is necessary to provide us with a valid email address, and, in addition, we store your IP address and the time of your request to prevent any misuse of our contact forms. Alternatively, you may contact us via the e-mail addresses cited above (Section 1). If you use one of these channels, the personal data transmitted will be stored automatically by Made to Web as data controller to handle our contact with you. The legal basis for this processing is Art. 6(1)(f) GDPR.

In some cases we may ask you for further information, such as name, occupation, address or telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.

All contact forms are provided and managed by Made to Web. Submissions through our contact forms are processed by HubSpot (see Section 10.1) as our service provider. The personal data you provide thereby will thus be collected and stored on our behalf by HubSpot and shared with entities within the Made to Web group of companies as related to the underlying processing and subject to Made to Web ensuring that appropriate agreements are in place between the Made to Web entities, which will include but is not necessarily limited to Model Clause agreements for any transfers between EU/EEA based entities and non-EU/EEA based entities.

In addition, HubSpot uses functional cookies for analytic purposes, see more details in Section 10.1. Any non EU/EEA transfer of your personal data in conjunction with the processing by HubSpot is covered by Model Clause agreement(s). Upon your submission of our contact forms, your IP-address and date and time of your action will be collected. This allows us to prevent misuse of our services. The legal basis for this processing is Art. 6(1)(f) GDPR.

5. Registration on Our Website

If you make use of our website to register for certain services or events, or to download e-books you will be asked to provide personal data. The information inserted in the respective registration form will be transmitted to Made to Web as data controller. The legal basis for the processing of data - which is necessary to provide you with the respective service - is Art. 6(1)(b) GDPR. Regarding the processing of further personal data you will be asked to grant your explicit consent, and the legal basis for that processing is Art. 6(1)(a) GDPR.

6. Unsolicited Special Categories of Personal Data

Other than the information you provide when you submit a contact form (see Section 4) or register on our website (see Section 5), we do not generally seek to collect special categories of personal data through this site.

"Special categories of personal data" includes the various categories of personal information and data identified by privacy laws of United States, European and other jurisdictions as requiring special treatment, including in some circumstances the need to obtain explicit consent. These categories may include personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning sexual orientation (Art. 9 GDPR).

Therefore, we advise you not to provide any unsolicited sensitive personal data. Made to Web applies HTTPS or other appropriate technical and organizational measures to secure the personal data transmitted over its website.

7. Newsletters

We may provide the opportunity to sign-up for a periodic email newsletter by entering in your email address and confirming it by clicking on a confirmation link sent to you by us by e-mail (double opt-in). The legal basis for this processing is Art. 6(1)(a) GDPR.

In some cases we may ask you for further information, such as name, occupation, address or telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.

If you subscribe for our periodic email newsletter your IP address as well as data and time of subscription will be collected and stored at Made to Web as data controller. This allows us to prevent misuse of our services or of the e-mail address of the subscriber. The legal basis for this processing is Art. 6(1)(f) GDPR. This data is only used for the distribution of the newsletter.

We currently use HubSpot (see Section 10.1) as our 3rd party email provider to deliver our newsletters. The personal data you provide thereby will be collected and stored on our behalf by HubSpot as our service provider. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see Hubspot’s privacy policy.

By opting in to any of the specific email types (purposes), you are giving us your consent to send you emails regarding those specific purposes. Examples of these different email purposes are as follows: Business news, Events & Marketing Information and Career opportunities.

The subscription may be terminated by you at any time by following the unsubscribe instructions included in each newsletter or by emailing our Data Protection Officer privacy@madetoweb.co.uk. We will delete the relevant personal data promptly upon your unsubscribe instruction.

8. Testimonials

We display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent we may post your testimonial along with your name. The legal basis for this processing is Art. 6(1)(a) GDPR. If you wish to update or delete your testimonial, you can contact us at privacy@madetoweb.co.uk.

9. Cookies (General Information)

Made to Web's website makes use of cookies to save and retrieve information about your visit to our sites. Cookies are small files of software which save and retrieve information about your visit to a website or application. They reside in your internet browser to help remember your preferences and previous activity. You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.eu.

Cookies currently used on our site may identify you as an anonymised number. We and our partners (e.g., marketing partners, affiliates, or analytics providers) use cookies and log files to analyze trends, administer the website, track users movements around the website, and gather demographic information about our user base. We may receive anonymised reports based on the use of these technologies by our partners on an aggregated basis. We also use this data to provide the site’s content, ensure the functionality of our information technology systems, and to optimize our website. The legal basis for this processing is Art. 6(1)(f) GDPR. The data of log files will be stored separately from your other personal data.

Users can control and refuse the use of cookies at the individual browser level. Cookies installed can be deleted. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited.

For more comprehensive information about how our website use cookies please read our Cookie Policy.

10. Third Party Applications

We will respect and protect your privacy as set out in this Privacy Policy. We will share your personal data with third parties only in the ways that are described in this Privacy Policy - and do not and will not sell your personal data.

Made to Web shares your personal data with third parties, in particular non-Made to Web parties, only with your express consent or under another lawful basis for processing under the applicable law.

Categories of non-Made to Web parties with which we share your personal data include vendors such as host and cloud service providers, marketing and mailing agencies, and sub-contractors involved in the fulfilment of our contractual obligations towards our clients. The legal basis for this processing is Art. 6(1)(f) GDPR.

10.1 HubSpot

Our website uses HubSpot, Inc. 25 First Street, 2nd Floor, Cambridge, MA 02141 USA ("HubSpot) for our online marketing activities. HubSpot is a software company from the USA with a branch office in Ireland.

This is an integrated software solution that we use to cover different aspects of our online marketing. This includes, among others: Email marketing (newsletter, together with automated mailings, e.g., for provision of downloads), social media publishing & reporting, contact management (e.g., user segmentation & CRM), landing pages and contact forms.

Our live chat service and contact forms allow our visitors a more efficient method of communicating with us and requesting information. These requests and any personal information submitted by you to our website are stored on the servers of our software partner HubSpot. We can use it to make contact with visitors to our website and to determine which of our company’s services are interesting for them. All information collected by us is subject to this data privacy policy. We use all information collected exclusively for optimizing our marketing measures.

Moreover, we use the live chat service "messages" from HubSpot on some sub-pages to improve users’ experience on our website for the sending and receipt of notifications (round chat icon on the lower right edge of the screen). If you consent to and use this feature, then the following data are transferred to the HubSpot servers:

  • Content of all chat messages sent and received
  • Context information (e.g., page on which the chat was used)
  • Optional: Email address of the user (if it is provided by the user via the chat feature)

The legal basis for the use of HubSpot’s services is Art. 6(1)(f) GDPR – justified interest. Our justified interest in the use of this service is the optimization of our marketing measures and the improvement of our service quality on the website.

HubSpot is certified under the conditions of:

More information:

10.2 Google Analytics

Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com ("Google Analytics" or "Google"). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.

In using Google Analytics our website employs the extension "anonymize_ip". In doing so, Google abbreviates and thereby anonymises your IP address before transferring it from EU/EEA member states. Google uses this information to analyze your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.

Google may also transfer this information to third parties where required to do so by law or where such third parties process this data on Google’s behalf. Google states that it will in never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly as noted elsewhere in this Privacy Policy. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.

Google Analytics also offers a deactivation add-on for most current browsers that provides you with more control over what data Google can collect on websites you access. The add-on tells the JavaScript (ga.js/gtag.js) used by Google Analytics not to transmit any information about website visits to Google Analytics. However, the browser deactivation add-on offered by Google Analytics does not prevent information from being transmitted to us or to other web analysis services we may engage.

Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how our site is used.

You can find additional information on how to install the browser add-on referenced above: https://tools.google.com/dlpage/gaoptout

For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU – U.S. Privacy Shield Framework.

10.3 Google reCaptcha

This section comprises our reCaptcha Policy.

Our website uses Google reCaptcha (hereinafter "reCAPTCHA"), a web spam and abuse prevention service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, www.google.com ("Google reCaptcha" or "Google").

This policy explains what reCaptcha is and how and why we use it on madetoweb.co.uk (our "Website").

reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as our website visitor opts-in by agreeing to this policy.

For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.

Data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

Users are subject to Google’s Terms of Service and Privacy Policy, for more information about Google reCAPTCHA and Google's privacy policy see below.

More information:

11. Social Media Links

You can find Made to Web on the following social media:

These providers are controllers for the relevant data processing.

12. Deletion and Term of Storage

Made to Web processes and stores your personal data only for the time necessary to achieve the stated purpose (unless otherwise stated in this Privacy Policy) and as permitted under the applicable laws or regulations.

As soon as the purpose for data storage is achieved, or the appropriate term of storage provided for by any applicable laws or regulations expires, your personal data will be deleted consistent with this and any other applicable Made to Web policies (e.g., document retention and/or records management policy) unless your personal data are required for the formation of or performance under a contract.

13. Your Rights as Data Subject

You have the following rights:

  • Right of access (Art. 15 GDPR)
    In principle, you have the right to receive information on the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.

  • Right to rectification or erasure (Art. 16 and 17 GDPR)
    You have the right to have incorrect personal data corrected. In addition, you have the right to demand that your personal data is deleted if further processing is no longer necessary, if processing is unlawful or if you have withdrawn your consent.

  • Right to restriction of processing (Art. 18 GDPR)
    If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.

  • Right to object (Art. 21 GDPR)
    If the processing of your personal data is based on Art. 6 (1)e or f GDPR, you have the right to object to the processing if the further requirements of Art. 21 GDPR are met.

  • Right to data portability (Art. 20 GDPR)
    Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller.

    You can require this by sending us an email at privacy@madetoweb.co.uk.

    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the location of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the applicable data protection laws and regulations.

15. Changes to the Policy

We may change this Privacy Policy from time to time. You can see when this Privacy Policy was last updated by checking the "last updated" date displayed at the top of this document.